At a glance
- Workplace
- Remote
- Location
- Remote
- Salary
- USD 202,400-278,300 · Base salary
About the role
- The Staff Engineer will join the User Management team to own the full identity lifecycle, including user provisioning, authentication, and authorization.
- This role focuses on building and scaling identity and access infrastructure that serves as a platform for other engineering teams across the company.
- The position is part of a North American expansion to establish follow-the-sun coverage and collaborate closely with an existing team based in Helsinki.
Responsibilities
- Design, build, and evolve the authorization platform using RBAC, ABAC, and ReBAC models.
- Develop and maintain the authentication platform, including integration with Auth0.
- Manage the user management platform for creating, provisioning, and managing user identities and entitlements.
- Partner with security teams to ensure systems are secure by design and compliant with SOC2 and GDPR.
- Design highly scalable systems to support a growing customer base.
- Define the long-term roadmap for authentication, authorization, and user management domains.
- Build self-service APIs (GraphQL, gRPC, REST) for internal product engineering teams.
- Drive projects autonomously from North America while coordinating with the Helsinki-based team.
- Champion strong testing, observability, and reliability practices across the platform.
Requirements
- Strong experience building and operating identity, authentication, or authorization platforms at scale.
- Proficiency in Java 2X, Spring Boot 3.X.X, WebFlux, and Maven.
- Experience with SQL, GraphQL, gRPC, and REST APIs.
- Knowledge of cloud and infrastructure tools including AWS, GCP, Kubernetes, and Helm.
- Expertise in identity and security protocols: RBAC/ABAC/ReBAC, OAuth 2.0, OIDC, JWT, SAML 2.0, and SCIM.
- Experience with enterprise SSO federation, including assertion validation and encryption handling.
- Familiarity with event-driven architecture patterns.
- Commitment to TDD or automated testing practices.
Preferred qualifications
- Auth0 experience
- SpiceDB / Zanzibar-style authorization system experience
- Apollo Federation
- OpenTelemetry
- Experience operating within SOC2 and/or GDPR-compliant environments
Benefits
- Equity
- Generous benefits program
Workplace
- Role is based in North America (United States and Canada).
- Requires close collaboration with a team based in Helsinki, Finland.
Skills
- Java
- Spring Boot
- WebFlux
- Maven
- SQL
- GraphQL
- gRPC
- REST
- AWS
- GCP
- Kubernetes
- Helm
Show all 15 skills
- OAuth 2.0
- SAML 2.0
- SCIM
